RBL checking

shanna leonard ssl at AHSC.ARIZONA.EDU
Wed May 5 01:27:53 IST 2004


Ed Kasky wrote:

> At 02:08 PM Tuesday, 5/4/2004, jason wrote -=>
>
>> Just wanted to see what people thought about the various RBL's. Which
>> ones
>> are good, which are bad etc.
>>
>> Also, I'm working on a script of some sort (command even) that will
>> parse
>> my logs and be able to sort out some statistics to see the stats on how
>> many rejections each specific RBL is doing...
>>
>> Be nice to get a print out of some sort to see a nice break down...
>

per advice on this list, I am using sbl-xbl spamhaus list for reject via
sendmail.
(it is apparently more conservative than some)

I am bouncing about 3.5k messages a day thru rbl rejects using xbl+sbl
and dul.dnsbl.sorbs.net in sendmail (all but about 700 of those are from
xbl+sbl)- I have not yet had a false positive report from these. (not
saying it hasnt happened, just that I havent heard :)

- by contrast MailScanner identifies approx 700 spams and 450 viruses a
day.

I use other RBLs to contribute to SA score.

here are my tweaks in spam.assassin.prefs.conf - not saying to follow my
example necessarily.

score RCVD_IN_BL_SPAMCOP_NET    2.5
score RCVD_IN_DSBL      1.0
score RCVD_IN_DYNABLOCK 2.2
score RCVD_IN_NJABL     .4
score RCVD_IN_NJABL_PROXY 1.0
score RCVD_IN_NJABL_RELAY 1.0
score RCVD_IN_NJABL_DIALUP 2.2
score RCVD_IN_OPM 4.3
score  RCVD_IN_SORBS  .7
score  RCVD_IN_SORBS_WEB  1.0
score  RCVD_IN_SORBS_SPAM  .5
score RCVD_IN_RFCI      0.5
score DNS_FROM_RFCI_DSN         1.5
score NO_DNS_FOR_FROM           2.0

--
----
MHO
---
shanna leonard
arizona health sciences library
626-2923
----------------------------------

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list